Okay.
Go to Active Directory Users and Computers
right click on the domain controller then click on the properties option
click on the group policy tab
click on the New button and call it something like Non-admin
then click on the properties tab
once this is created go to
user config
admin template start menu and taskbar
remove and prevent access to shutdown=enabled
make sure that the TS users are part of this group.
Thanks,
Kelly W.